ESET Internet Security

Applies to: Veriato Windows Agent 10.x
Article No: 18559280835735

To prevent Veriato Vision from being scanned and detected by ESET Internet Security, before installing, follow these steps. Your ESET product may differ from the one shown here. We recommend consulting the ESET KnowledgeBase for your product version for more accurate steps. However, use the recommended exclusions below. See Antivirus Exclusions for Windows for additional exclusions. If you have trouble, contact Support.

Change settings to enable ESET prompts during installation  

1. Open your ESET control panel.
   Open the ESET Internet Security control panel. Select Setup from the left menu.
   
2. Select Advanced Setup.
   
3. Set Network Protection to "Interactive mode."
   In Advanced Setup, select Network Protection from the left column. 
   In the right pane, expand Basic and change the "Filtering Mode" to Interactive mode.
   

In Interactive mode, after you install the agent, ESET will prompt you to "allow" components it has detected. You can then review and refine the rules that are created. 

IMPORTANT: Before remote deployment across the network, change the firewall filtering mode to Automatic mode. 

4. Set Malware scans to "Always ask the end-user."
   In Advanced Setup, select Detection Engine at the top left and  Malware scans.
   In the right pane, expand Cleaning level and change the setting to Always ask the end-user. This enables the prompts that will allow you to set malware exclusions if they arise during installation.
   
5. Click OK to save your settings.

Add folder and file name exclusions

Adding exclusions will decrease the chance of ESET detections, making your job a little easier.  

1. In Setup > Advanced setup under Detection Engine, expand Exclusions.
   
2. Add Performance exclusions.
   Next to Performance Exclusions, press Edit. 
   Press Add to add each Veriato Agent folder:
   C:\Windows\winipbin-install\*
   C:\Windows\SysWOW64\winipdat\*
   C:\Windows\System32\winipdat\*
   C:\Windows\winipbin\*
   
   Press OK to return to Detection Engine exclusions. 
3. Add Detection exclusions.
   Next to Detection exclusions, press Edit.
   

Enter the following agent folder exclusions:

C:\Windows\winipbin\*
C:\Windows\winipbin-install\*
C:\Windows\SysWOW64\winipdat\*

And add the following files that ESET may detect:

C:\Windows\winipbin-install\Admin.exe
C:\Windows\winipbin-install\InstallerService.exe
C:\Windows\winipbin-install\SPSetupWin.exe
C:\Windows\winipbin-install\Preinstaller.exe
C:\Windows\winipbin-install\spsetup.exe
C:\Windows\winipbin-install\spsetup64.exe
C:\Windows\winipbin-install\MSVxRsc.dll
C:\Windows\winipbin-install\SR_TmpRun.ini
C:\Windows\winipbin-install\bootstrap.exe
C:\Windows\winipbin-install\SDFMigrator.exe
C:\Windows\winipbin\SDFMigrator.exe
C:\Windows\Temp\winipbin-install\_msfile*.inf
C:\Windows\Temp\winipbin-install\ra.dll
C:\Windows\winipbin\mrstch.exe
C:\Windows\winipbin\mxcrsc32.exe
C:\Windows\winipbin\wlcnthr.exe

4. Press OK to save changes and return to the Advanced Setup panel.  

Add real-time processes exclusions

1. Add Processes exclusions.
   From the left column of Advanced Setup, select Real-time file system protection.
   Under Processes exclusions, select Edit.
   
2. Enter Veriato Agent .exe, .dll, and .ini files.
   In the Processes exclusions panel, click Add to add the main executable files (see the list above) used during and after agent installation.
   
3. Press OK to save changes and exit the control panel.
   The settings above may prevent detection, but you have set up ESET to prompt you to add additional exclusions during or immediately following installation.  

Install an agent and respond interactively

Install a test agent : 

1. Add file and process exclusions as directed above (or with additional exclusions from the Client list). 
2. In our tests, remote installations were successful after disabling the Windows Firewall at the agent. 

1. Navigate to Control Panel > System and Security > Windows Defender Firewall.
2. Select Turn Windows Firewall off in the right column.
   In the next panel, select Turn off Windows Defender Firewall.

3. Install the agent on a machine configured with the antivirus solution and allow the computer to restart. 
4. Respond to ESET prompts to add exclusions interactively (continue below). 

Add exclusions interactively

1. When the ESET prompt appears, choose Create rule and remember permanently.
2. Press Allow. 
3. Detection may still occur, but you (or the end user) will receive a prompt to add it to exclusion rules.
4. Return to ESET Advanced Settings, to review your additional exclusions as shown above for the example "threat":  
   @Name-BH/MonitorVeriato.1@TYPE=ApplicUnwnt

5. After the test is complete, change the ESET Advanced Setup > Network Protection > Firewall > Filtering mode to Automatic mode.

You are now ready to deploy the agent agent across the network.

Updated: 10/25/2023